Using IT4IT to transform the IT function

Size: px
Start display at page:

Download "Using IT4IT to transform the IT function"

Transcription

1 IT4IT Get Ready to manage the Digital Enterprise Using IT4IT to transform the IT function Rob Akershoek, Chair of the IT4IT

2 The New Digital Enterprise / Smart Ecosystem Economy as code Smart devices Data lake Artificial Intelligence Event driven architecture Machine Learning Multi-Vendor Ecosystem Cloud services Robotics API economy Streamlined, efficient, automated and transparent ecosystem Everything consumed as a service

3 Manage Disruption or be Disrupted ENABLE DIGITAL ENTERPRISE Enable new business models Business innovation Boost customer experience Automate business processes Provide business insight Rationalize and simplify IT portfolio INCREASED DEMAND ON IT Deliver (innovate) faster Be flexible to adapt to change Lower cost Control risks and security issues Reduce technology debt Improve transparency and traceability Copyright Rob Akershoek / The Open Group 2017 TRANSFORM THE IT ORGANIZATION LEAN & AGILE IT FUNCTION Speed & Value LEVERAGE NEW TECHNOLOGIES / NEW IT ECO SYSTEM Cloud (Hybrid Cloud) Big Data Mobile Blockchain SOA and Micro-services API economy Internet of Things Artificial Intelligence / Machine Learning LEVERAGE NEW IT MANAGEMENT PARADIGMS Agile delivery Continuous Delivery DevOps Design Thinking Bi-Modal / Multi-speed IT Everything as code Containerization Broker 2

4 Streamline and Automate IT management activities Strategy Demand Requirement Request Use IT services Charge Incident Support Research & Development Marketing & Sales Production & Logistics IT to Business run the Value business Chain Business Operations Customer Business Business Demand Business users Value $ Plan Development Deploy Operate & Support IT Value Chain: IT for the IT Function (IT4IT)

5 Streamline and automate end-to-end IT processes to optimize value / outcome Business (BIZ) Continuous Feedback & Improvement Development (DEV) Transparency & Insight Operations (OPS) Business Demand MAKE IT FLOW, STREAMLINE & AUTOMATE Value $ Plan Design Code & Build Deploy Test Release Monitor Operate Feedback loops Value & Business Alignment Faster delivery & Fixing Control Risks Improve performance & customer experience Reduce cost / Improve efficiency Copyright The Open Group 2017

6 Missing enterprise architecture for the IT function? Reengineering the core / architecting the digital enterprise Business Business value streams / business activities IT services consumer Business Architecture (e.g. value streams, end-to-end processes, capability) Application Architecture Data Architecture Technology architecture IT services IT delivery IT Value Chain / IT Management activities IT4IT services Lacking an effective IT management architecture vision & blueprint

7 The cruel reality is we don t have a digital management platform Fragmented processes, teams, siloes of IT management tools, lots of data, no insight, no transparency, many different backlogs, to-do lists, poor communication and collaboration, manual activities. PLAN & ARCHITECTURE DESIGN, BUILD & TEST DEPLOY RUN Architecture Project Backlog Requirements Design Develop & Code Test Defect Release / Deploy Request Desk Monitor Incident Security GAP GAP GAP GAP No end-to-end workflows / Lot of manual (and unplanned) disconnected activities

8 We have to face the reality: This is how we are managing IT today... XLS Project API Application Source Code Static Code Analysis Build & Continuous Integration (CI/CD) Design & Prototype Backlog Management Requirement Management Unit Test Artefact Repository Test Management Deploy Autom. Performance Testing Risk & Compliance Element Managers Application Release Automation Log analytics Risk Assessment Security Testing Test Data Mngt Knowledge Base Configuration Management Event Integration Monitoring Portal IT Management System License Management Discovery / Inventory Request Mngt System IT Financial Management Contract Reporting System Security Monitoring (SIEM) API

9 In the past we go away with it but now Cloud APIs / Interfaces Internet of Things Micro-services Multi-vendor Sourcing SIAM Cloud More services and components More vendors in the IT-ecosystem Continuous delivery, patches, Log data Monitoring data Transaction data More changes & releases e.g. security events, vulnerabilities, threats Exploding IT management data Storage, On/Off, FUTURE IT ORG SMALL, LEAN/AGILE, AUTOMATED & TRANSPARENT More events More requests & consumption Legal, regulatory controls e.g. GDPR Controls & Regulatory Requirements The current IT organization is stretched beyond it limits

10 Value START DEFINE THE NEW IT OPERATING MODEL & REARCHITECT THE IT VALUE CHAIN

11 New IT Operating Model Reinvent the way we work Modernize the IT management platform Agile DevOps IT Value Streams Shift Left Feedback Loops Broker Automated end-to-end Workflows Integrated Digital Management Platform Common Information Model People (Team Structure, Skills and Competences)

12 #AGILE #DEVOPS #COLLABORATION #CONTINOUS DELIVERY #SECURE BY DESIGN #SHIFT LEFT #MULTI VENDOR SOURCING #SERVICE BROKER Why would you start with a blank sheet? Leverage the IT4IT reference model as the starting point for a modern IT operating model #CUSTOMER EXPERIENCE

13 Use the IT4IT Standard as a Blueprint for the new IT operating model Copyright Rob Akershoek / The Open Group 2017

14 The Open Group» A global consortium that enables the achievement of business objectives through the development of open, vendor-neutral IT standards and certifications UNIX» More than 500 member organizations: a diverse membership that spans all sectors of the IT community customers, systems and solutions suppliers, tool vendors, integrators and consultants, as well as academics and researchers Copyright The Open Group 2017

15 The IT Value Chain consists of 4 Value Streams The value streams define the capabilities/building blocks you need to manage IT throughout the entire service life cycle to ensure value delivery to the business. IT Value Chain Strategy to Requirement to Deploy Request to Fulfill Detect to Correct Drive IT portfolio to business innovation Build what the business wants, when it wants it Catalog, fulfill, & manage service usage Anticipate & resolve production issues

16 IT4IT Standard Level 1 Functional Enterprise Architecture Architecture Policy Requirement Defect Defect Test Offer Consumption Problem Incident Lifecycle Data Object Relationship Policy Scope Agreement Proposal Demand Backlog Item Requirement Source IT Initiative Source Control Project Test Case Build Build Package Build Build Package Offer Management Offer Catalog Composition Catalog Entry Shopping Cart Request Rationalization Request Subscription Chargeback Contract Chargeback/ Showback Chargeback Record Usage Usage Record Problem/ Known Error Contract Level Diagnostics & Remediation Run Book Incident Event Event Monitoring Monitor Model Backbone Data Object Conceptual Logical Design Release Release Composition Release Blueprint Fulfillment Execution Fulfillment Request Desired RFC Change Control Actual Configuration Management Strategy to Requirement to Deploy Request to Fulfill Detect to Correct

17 IT4IT Strategy to value stream level 2 Development Scope & Budget Development Spend Chargeback/Showback Request to Fulfill Enterprise Architecture Chargeback Record Conceptual n:1 Conceptual Blueprint n:1 Policy Cost Modeling IT Cost Model ITFM Supporting Function Policy 1:n Design Logical Requirement to Deploy Requirement Enterprise Architecture n:m Conceptual n:m Policy n:m Requirement Requirement to Deploy Business Process Business Strategy (External to IT) Backlog Item Backlog Item Demand 1:n Backlog Item Actual Spend Budget for Run & Operate Scoping & Investment Decisions 1:n 1:n Backlog Item (rationalized/ prioritized) Estimated Budget n:1 IT Investment n:1 IT Budget Item ITFM Supporting Function Scoping & Proposed IT Investment Investments Decisions Proposal Scope Agreement IT Budget Request Approved IT Budget Scope Agreement 1:n Project IT Initiative Finance (external to IT) Requirement to Deploy Backlog Item 1:1 Competency (availability) Assets (availability) Estimated Labor & Asset Configuration Estimated Labor & Asset Cost Problem Detect to Correct Problem, Known Error Labor Management IT Asset Management Supporting Function Offer Management Request to Fulfill

18 IT4IT Requirement to Deploy value stream level 2 Proposal Scope Agreement Strategy to Request Rationalization Request to Fulfill Chargeback/ Showback Request to Fulfill Conceptual Strategy to Policy Scope Agreement 1:n 1:n Request Chargeback Record Development Scope & Budget Development Spend Project Logical Blueprint IT Initiative Requirement IT Initiative 1:1 Requirement Development Spend Design Logical 1:n 1:n n:m 1:n n:1 1:n Source Control Source Release Release Package Composition Comp. Release 1:1 Blueprint 1:n 1:n Release Test 1:n n:m Contract (Template) n:m 1:n n:m Defect Defect RFC (Normal) Change Control RFC Fulfillment Execution 1:n 1:n 1:1 1:n n:m Build Build n:1 Catalog Entry (Unbound) Build Package Build Package Release Package Defect Level Contract Detect to Correct Desired Request to Fulfill Catalog Composition Catalog Entry Request to Fulfill Fulfillment Request RFC Policy Strategy to n:m Requirement 1:n Test Case 1:n Defect 1:1 Demand Backlog Item Strategy to 1:n Problem Problem, Known Error Detect to Correct 1:1 Defect Defect Incident Incident Detect to Correct

19 ISO BABOK EVERY FAIRY TAIL HAS A DARK SIDE IT MANAGEMENT COBIT BRMBOK SIAM

20 IT4IT providing the end-to-end picture for managing the digital enterprise IT4IT as the core of the modern IT operating model Strategy to Requirement to Deploy Request to Fulfill Detect to Correct Agile Development DevOps Continuous Delivery

21 IT4IT as the foundation for the IT operating model combined with a few other selected practices Strategy to IT4IT as the core of the modern IT operating model Requirement to Deploy Request to Fulfill Detect to Correct Enterprise Architecture TOGAF PMBOK Project or Management Prince2 Agile Delivery SCRUM IT Management ITIL IT4IT (as the core of the modern IT Operating Model IT Governance Competence Framework Security Management COBIT ISO SFIA or ecf Security, IT Governance, Risk & Compliance Vendor & Sourcing Management Skills & Competence Management Financial Management

22 DEFINE STANDARD TERMINOLOGY & INFORMATION MODEL

23 Growing volume of IT data Lacking a consistent data model / concepts within the entire IT function Lacking end-to-end traceability and transparency Enterprise Architecture Demands Project & Backlog & Application portfolio IT risks Technology life cycle IT Standards Vulnerabilities Source code Contracts & License Epics / User Stories Product Backlog Builds Defects Test cases Test logs Documents Knowledge items catalogue Requests API register User identities & Access Rights Change & Release Configuration data Software licenses Consumption & usage data Discovery Incident & problem Application & system Logs Job Schedules Security events Availability & Performance data Monitoring data & events IT budget & costs

24 The IT Model IT (portfolio) Release (Blueprint) Instance

25 The IT Model Becomes Published in Catalog Entry Ordered Released/Deployed! Streamlined workflow across the value chain (flow / pull / manage work queues) IT (portfolio item) Release (and blueprint) Instantiation (and related resources) Transparency, Traceability & Continuous Feedback Loops

26 From ordering s to complete blueprints define and manage cloud patterns Order ingredients e.g. virtual machine, database, web server, load balancer, storage, monitoring, Order a complete template / blueprint (infrastructure as code) e.g. ARM templates, CloudFormation, Containers

27 IT4IT Standard Functional Enterprise Architecture Architecture Policy Requirement Defect Defect Test Offer Consumption Problem Incident Lifecycle Data Object Relationship Policy Scope Agreement Proposal Demand Backlog Item Requirement Source IT Initiative Source Control Project Test Case Build Build Package Build Build Package Offer Management Offer Catalog Composition Catalog Entry Shopping Cart Request Rationalization Request Subscription Chargeback Contract Chargeback/ Showback Chargeback Record Usage Usage Record Problem/ Known Error Contract Level Diagnostics & Remediation Run Book Incident Event Event Monitoring Monitor Model Backbone Data Object Conceptual Logical Design Release Release Composition Release Blueprint Fulfillment Execution Fulfillment Request Desired RFC Change Control Actual Configuration Management Strategy to Requirement to Deploy Request to Fulfill Detect to Correct

28 The core of the new IT operating model is the data model and service backbone Architecture Defect Policy Requirement Test Case Shopping Cart Problem/ Known Error Incident Scope Agreement Source Build Offer Request Subscription Chargeback Contract Chargeback Record Contract Event Backlog Item IT Initiative Build Package Catalog Entry Usage Record Run Book Monitor Fulfillment Request RFC Conceptual Logical Release Release Blueprint Desired Actual Strategy to Requirement to Deploy Request to Fulfill Detect to Correct

29 Understand the customer journeys / flow of work New Idea / Demand / Proposal Improvement Opportunity Enhancement Requirement Epic Feature User Story Defect / Bug Request Release Consumption & Pay Value Realization Event / Incident Audit Finding Security vulnerability Security breach Data breach Fix / Correction

30 Solving core problems in the end-to-end delivery chain? Capturing demands Capture requirements / backlog items Lot of rework / defects Bureaucratic change & risk processes CMDB not up-todate No self service / self help backlog & Investment planning No service / application portfolio No requirements traceability Long lead time for infrastructure provisioning (no self service) Testing takes to long Supplier Contracts blocking Utilization, Consumption & Costs unknown No proactive monitoring Security risks not visable However before fixing issues: Define desired outcome than re-engineer end-to-end processes and underlying tools/administrations

31 Typical reaction of IT executives on IT4IT?» Too big and complex you cannot boil the ocean» No budget to do this!» We don t have a greenfield, I have an IT shop to run» I am already doing this / working on it» I don t have time for this, we are too busy! with this you should be able to boost digital experience You might be busy, but your business is wondering what you are doing! 30 Copyright The Open Group 2017

32 Organizations are executing a large number of initiatives to improve IT management Demand & Project Agile Management & Application Technology life cycle management Agile Development & Backlog Management Security Test Testing automation Continuous delivey User experience Self service & self help portal monitoring catalogue IT operations Artificial analytics API intelligence Application Infrastructure Management Identity & & Access Performance cloud provisioning Management Monitoring (using blueprints / ChatOps Automated event templates) response Application release automation Cyberdefence, Security monitoring, etc. CMDB Discovery & Auditing (e.g. service mapping) IT consumption & cost transparency analytics & CIO dashboard Risk & Security Data Analytics Integrate risk, security & compliance (in agile / new operating model GDPR

33 DEVELOP A CORE IT MANAGEMENT PLATFORM & SERVICE BACKBONE

34 Critical IT management capabilities for managing the digital enterprise Strategy to Requirement to Deploy Request to Fulfill Detect to Correct ENTERPRISE ARCHITECTURE ALM SYSTEM (REQUIREMENTS / PRODUCT BACKLOG) REQUEST MANAGEMENT INCIDENT MANAGEMENT PROBLEM MANAGEMENT DEMAND MANAGEMENT CONTINUOUS INTEGTATION SOURCE CODE REPOSITORY IDENTITY MANAGEMENT SUBSCRIPTION & ACCESS MGT EVENT MANAGEMENT PORTFOLIO BACKLOG TEST MANAGEMENT BUILD & ARTEFACT REP. ORCHESTRATION SYSTEM CONSUMPTION & USAGE SERVICE MONITORING SECURITY OPERATIONS PROJECT PORTFOLIO PROJECT MANAGEMENT RELEASE & DEPLOYMENT AUTOMATION (CONTINUOUS DELIVERY) ELEMENT MANAGERS CHANGE MNGT SYSTEM SIEM SERVICE PORTFOLIO SERVICE BLUEPRINTS Backbone SERVICE CATALOGUE CMDB DISCOVERY / INVENTORY IT FINANCIAL MANAGEMENT RISK & COMPLIANCE CONTRACT MGNT SYSTEM Supporting Activities SERVICE REPORTING DOCUMENT MANAGEMENT KNOWLEDGE MANAGEMENT AUDIT MANAGEMENT VENDOR MANAGEMENT PROCUREMENT SYSTEM IT DATA LAKE COLLABORATION

35 IT4IT Vendor Landscape Strategy to Requirement to Deploy Request to Fulfill Enterprise Architecture (EA) ALM system Request Management Detect to Correct ITSM platform (incident, problem, change,..) IDE Source & Artefact Repository Orchestration & Deployment Automation Monitoring & Event Management Build & Continuous Integration & Project (PPM) Virtualization Code quality CMDB & Discovery Test Management Security Testing Element Managers Supporting Activities Governance, Risk and Compliance Security Management Sourcing & Vendor Intelligence & Reporting Finance Software asset / License Resource & Projects

36 Lacking interoperability and integration of building blocks How to build an integrated solution? Lego Knex Fischertechnik Tinkertoy Krinkels How to we create interoperability / data exchange between the many different tools and different ways of working?

37 Backbone The DNA of the IT organization Transparency and end-to-end traceability Strategy to Requirement to Deploy Request to Fulfill Detect to Correct Backbone :: / CMDB Supporting Activities e.g. Financials, Security, Risk & Compliance, Sourcing & Vendor, Business Intelligence, Manage business value & outcome Manage Budget & IT Costs (IT Financial Management) Manage Controls, Risks & Issues (IT GRC) Monitor Health, Performance & Availability Manage incidents, Problems, Change, etc.

38 Create visibility and traceability of all work (and queues) across the IT value chain Strategy to Ideas / Demands Improvement Opportunities Projects / Epics Requirement to Deploy Backlog items e.g. stories, defects, Enhancements Test cases Defects Request to Fulfill requests Change Request / RFC Detect to Correct Incident Problem Operations Tasks backlog / Projects Product Backlog Requests Incidents, problems,. Life cycle information Backbone (business capabilities, IT services, Technologies, ) Risk assessment IT Audits Supporting Activities Issues / Findings

39 Key building blocks for end-to-end service life cycle management Strategy to Requirement to Deploy Request to Fulfill Detect to Correct Project Backlog Product Backlog Requirement Defect Test Case Incident Request Change Event IT Backbone :: / Catalogue & CMDB Life cycle information Configuration Item Supporting Activities

40 Building an IT4IT / DevOps / Digital Management Platform IT4IT Platform / Backbone Work items: demands, epics, stories, requests, incidents, DEMAND & PORTFOLIO BACKLOG & PLANS DESIGN & CODE BUILD & INTEGRATE TEST DEPLOY/ RELEASE MONITOR & OPERATE Automated build, test, deploy and monitor Big Data Platform (for IT) (IT Data Lake)

41 Example: manage full cloud service life cycle Product Team / Product SERVICE BACKBONE & IT SERVICE MANAGEMENT PLATFORM Catalogue Catalogue & Request Request ITSM Problem Demand Backlog Epic Change RFC / Change CMDB Model + Configuration data Incident s / Products Epics / Stories Update Catalogue Change approval Deployment / Fulfillment request Configuration data Consumption & Cost Event DEVELOPMENT / ALM PLATFORM / CI CD PIPELINE Sprint Epic Backlog Build Test Release / Deploy Azure Automation Event Feature Story Defect Build Workflow Test Workflow Deployment Workflow Azure Resources Monitor (including Logs) Source code ARM template SOURCE CODE Build / Package ARTEFACT REPOSITORY Code Rules Test Result CODE ANALYSIS Unit Test Test case Test Result TEST MANAGEMENT Deploy / Fulfillment Tasks DEPLOYMENT e.g. PowerShell, ARM Azure Consumption & cost Azure CLOUD PLATFORM Monitoring & Event Management SERVICE MONITORING

42 Not just about the Toolset but also the Mindset Persons and interactions above processes and tools Focus on the entire system and flow Focus on data to provide insight Automate everything Working services above documentation Collaboration with the customer / business instead of managing contracts and SLAs. Ability to cope with change (no fixed plans) IT VALUE STREAMS Information / IT data DevOps Teams Cloud automation team Culture ORGANISATION & PEOPLE, SKILLS & CULTURE AUTOMATION OF IT TASKS

43 HOW TO START USING IT4IT? Demonstrate value Customer journeys Iterative approach

44 Example use cases / triggers for using the IT4IT Standard New multi-vendor sourcing model e.g. SIAM (new IT ecosystem). Implement new way of working (Agile and DevOps). introducing new ways of working such as Agile, Continuous Delivery and DevOps. Major change in technology landscape e.g. Cloud strategy (move to SAAS, PAAS and IAAS). Transformation of the IT function (e.g. business transformation, enabling the digital enterprise) Consolidate and rationalize the IT management tooling landscape. Multi-Vendor Sourcing & Hybrid Ecosystem Management Brokering Internal DC IAAS PAAS IT Transformation Streamline & Automate Agile CI/CD Pipeline DevOps S2P R2F R2F D2C SAAS SAAS

45 Continuous Integration & Delivery Where do you start? Implementation approaches.. Strategy to Requirement to Deploy Request to Fulfill Detect to Correct ARCHITECTURE DEMAND BACKLOG CODE CATALOGUE MONITOR EVENT SERVICE PORTFOLIO BUILD & INTEGRATE REQUEST INCIDENT PORTFOLIO BACKLOG TEST FULFILLMENT DEPLOY End-to-end service / application 44

46 IT4IT Experience Lab Demonstrate an integrated IT value chain covering: End-to-end process flow Skills, roles and responsibilities Data Tools Design and Prototype new way of working. Design and validate end-toend automated workflows. Backlog Manager Product Backlog Developer End-to-end IT Value Streams / Use Cases Cloud Automation Engineer Holistic approach to define the roles (required skills), organization and teams, tools, processes, data and integrations, KPIs/metrics, Controls,

47 Example approach: transform the IT management landscape IT Vision, IT Strategy & Key Drivers Vision and direction of the new IT function e.g. Agile, DevOps, Self-service, Automation, Cloud, (derived from the business strategy) Current Operating Model Value stream analysis (understand current way of working, skills / people, tools, etc.) Gap Analysis Perform gap analysis Maturity Assessment Target Operating Model Envision the target IT management architecture (process, skills, organization, tools, ) Transition plan / backlog Define roadmap and portfolio backlog Link transition to business benefits / value e.g. faster, better, cheaper,. Build & Continuously improve IT4IT capabilities Build end-to-end IT value chain / DevOps Pipeline (IT management capabilities, IT processes, organization, people, tools and data) $ Plan Design Code & Deploy Test Release Monitor Operate Build Feedback loops

48 IT4IT Reference Architecture Level 1 (excluding supporting activities) Architecture Enterprise Architecture Legend: High Gap Medium Gap Low or No Gap No Policy Policy Requirement/ Backlog item/ Enhancement Requirement / Backlog Defect Defect Offer Consumption (Self Portal) Shopping Cart Knowledge Item Knowledge & Collaboration Problem / Known Error Problem Incident Incident Scope Agreement Proposal IT Project Project Test Case Test Offer Catalogue Composition (combined with Offer Mngt) Request Request Subscription Chargeback Contract Chargeback / Showback Contract Level Event Event Backlog Item Demand Source Development Build Build Catalogue Entry Usage Record Usage Run Book Diagnostics & Remediation Monitor Monitoring / Application Design/ Blueprint Design Release Composition Release Release Blueprint Fulfillment Request Fulfillment Execution Desired RFC Change Control CMDB Configuration Management S2P (Plan) R2D (Build) R2F (Deploy) D2C (Run)

49 Use IT4IT to perform a gap analysis and defined a product vision & roadmap 2. S2P Phase 3 2. R2D 3. D2C Integrated Management (EA, PPM, ALM and ITSM) 6 Self service / Self help Agile Capacity Management 17 Predictive Analytics 14 3 Monitoring & Event 4 Model 16 Phase 2 Phase 1 Foundation Platform 2 1 Security Monitoring / SIEM Automated incident / event response ITSM Platform 2 10 Test automation 11 CI/CI Pipeline Agile Develop Platform 5 12 Security Testing Catalogue & Request Portal 13 Cloud deployment & cloud management 11 Release & Deployment Automation 15 Consumption & Usage Monitoring 4. R2F Enterprise Value The potential benefit that can be delivered. High Medium Low Deployment Risk The likelihood of failure to meet value / objectives High Medium Low

50 Wrap up! The market has changed the IT ecosystem is changing. The new digital enterprise requires a new IT operating model with a new IT management approach To enable agile development, continuous delivery, DevOps, multi-vendor sourcing, cloud management, IT4IT is a key success factor in this transformation to a lean and automated IT function.

51 Find out more Public: Join the Forum and contribute to building the standard! Download the standard Download the IT4IT Quick Reference Cards Order the Pocket Guide Watch videos of customers View past webinars Find white papers